Description
When an nginx web server implements an HTTP redirect by using the $uri or $document_uri variables within the redirection target location, the resulting configuration may be vulnerable to header injection.
Remediation
Implement the HTTP redirect with $request_uri instead of $uri or $document_uri.
References
Related Vulnerabilities
Genericons DOM-based XSS vulnerability
WordPress Plugin MW Font Changer Cross-Site Scripting (4.2.5)
WordPress Plugin AccessPress Social Counter Cross-Site Scripting (1.3.6)
WordPress Plugin Simple Fields Cross-Site Scripting (1.4.10)
WordPress Plugin Video Conferencing with Zoom Cross-Site Scripting (3.8.15)